CVE-2025-12928

CRITICAL 9.8CVE-2025-12928 · Published 10/11/2025 · updated 07/10/2026

Package	Affected versions	Patched versions
online job search engine fabian	`= 1.0`	No fix yet

Description

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument username/phone results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

References

code-projects.org · Product
lakshayyverma/CVE-Discovery · Exploit
lakshayyverma/CVE-Discovery · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free